IdentityModel Extensions for .NET

Nuget

The IdentityModel Extensions for .NET library provides robust tools to enhance authentication and authorization workflows in your .NET applications. Backed by the Entra team, this library simplifies working with OpenID Connect (OIDC), OAuth2.0, and JSON Web Tokens (JWT) in .NET.

Whether you're building secure APIs, implementing token validation, or managing claims, this library is designed to handle the heavy lifting for you.

Why IdentityModel?

  • Widely Adopted: Trusted by thousands of developers to integrate OIDC and OAuth2.0 standards.
  • Secure by Design: Built with security as a priority to reduce common vulnerabilities.
  • Extensible: Easily extend or customize for advanced use cases.
  • Battle hardened: Validates 5+ trillion requests daily, and growing.

Versions

You can find the release notes for each version here. Older versions can be found here.

Version Lifecycle and Support Matrix

See Long Term Support policy for details.

Major Version Currently Supported Version Status
8.x from 8.0.1 to Nuget Active (Current) - Tied to .NET 9 (STS) & 10 (LTS) ~ Nov, 2028
7.x 7.7.1 Supported (LTS) through .NET 8 LTS lifetime Nov 10, 2026.<br/>⚠️Versions < 7.7.1 not supported.
5.x 5.7.0 Supported (LTS), tied to the Microsoft.Owin.Security.JWT 4.2.2 lifetime.<br/>⚠️Versions < 5.7.0 not supported.

IdentityModel 8.x

Version 8.x introduces significant updates and improvements:

  • Enhanced Performance: Optimized token validation to handle high-throughput scenarios.
  • .NET Compatibility: Fully compatible with .NET 9.

🧭LTS: Supported through .NET 9 LTS lifetime: May 12, 2026 + .NET 10 LTS (~3 years).

IdentityModel 7.x

IdentityModel 7x introduced several improvements related to serialization and consistency in the API, which provide a better user experience for developers, as well as full AOT compatibility on .NET, and considerable performance improvements compared to IdentityModel 6x.

🧭LTS: Supported through .NET 8 LTS lifetime: Nov 10, 2026.

⚡Recommendation: Move to 8.x.

IdentityModel 6.x

🧭Deprecated: Support ended with .NET 7 LTS lifetime: May 2024.

⚡Action: Move to 8.x.

IdentityModel 5.x

Not a recommended version

🧭LTS: Supported for Microsoft.Owin.Security.JWT

⚡Action: Move to 8.x.

Samples and Documentation

The scenarios supported by IdentityModel extensions for .NET are described in Scenarios. The libraries are in particular used part of ASP.NET security to validate tokens in ASP.NET Web Apps and Web APIs. To learn more about token validation, and find samples, see:

Community Help and Support

Report a bug or request a feature directly in the GitHub repo.

Have a design proposal? Please submit a design proposal before starting work on a PR to ensure it means the goals/objectives of this library and it's priorities.

We leverage Stack Overflow to work with the community on supporting Microsoft Entra and its SDKs, including this one! We highly recommend you ask your questions on Stack Overflow (we're all on there!) Also browse existing issues to see if someone has had your question before.

We recommend you use the "identityModel" tag so we can see it! Here is the latest Q&A on Stack Overflow for IdentityModel: https://stackoverflow.com/questions/tagged/identityModel

Security Reporting

See SECURITY.md

Contributing

All code is licensed under the MIT license and we triage actively on GitHub. We enthusiastically welcome contributions and feedback. See Contributing.md for guidelines, branch information, build instructions, and legalese.

License

Copyright (c) Microsoft Corporation. All rights reserved. Licensed under the MIT License (the "License");

We Value and Adhere to the Microsoft Open Source Code of Conduct

This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact opencode@microsoft.com with any additional questions or comments.

Product Compatible and additional computed target framework versions.
.NET net5.0 was computed.  net5.0-windows was computed.  net6.0 is compatible.  net6.0-android was computed.  net6.0-ios was computed.  net6.0-maccatalyst was computed.  net6.0-macos was computed.  net6.0-tvos was computed.  net6.0-windows was computed.  net7.0 was computed.  net7.0-android was computed.  net7.0-ios was computed.  net7.0-maccatalyst was computed.  net7.0-macos was computed.  net7.0-tvos was computed.  net7.0-windows was computed.  net8.0 is compatible.  net8.0-android was computed.  net8.0-browser was computed.  net8.0-ios was computed.  net8.0-maccatalyst was computed.  net8.0-macos was computed.  net8.0-tvos was computed.  net8.0-windows was computed.  net9.0 is compatible.  net9.0-android was computed.  net9.0-browser was computed.  net9.0-ios was computed.  net9.0-maccatalyst was computed.  net9.0-macos was computed.  net9.0-tvos was computed.  net9.0-windows was computed.  net10.0 is compatible.  net10.0-android was computed.  net10.0-browser was computed.  net10.0-ios was computed.  net10.0-maccatalyst was computed.  net10.0-macos was computed.  net10.0-tvos was computed.  net10.0-windows was computed. 
.NET Core netcoreapp2.0 was computed.  netcoreapp2.1 was computed.  netcoreapp2.2 was computed.  netcoreapp3.0 was computed.  netcoreapp3.1 was computed. 
.NET Standard netstandard2.0 is compatible.  netstandard2.1 was computed. 
.NET Framework net461 was computed.  net462 is compatible.  net463 was computed.  net47 was computed.  net471 was computed.  net472 is compatible.  net48 was computed.  net481 was computed. 
MonoAndroid monoandroid was computed. 
MonoMac monomac was computed. 
MonoTouch monotouch was computed. 
Tizen tizen40 was computed.  tizen60 was computed. 
Xamarin.iOS xamarinios was computed. 
Xamarin.Mac xamarinmac was computed. 
Xamarin.TVOS xamarintvos was computed. 
Xamarin.WatchOS xamarinwatchos was computed. 

NuGet packages (3.5K)

Showing the top 5 NuGet packages that depend on System.IdentityModel.Tokens.Jwt:

Package Downloads
Microsoft.IdentityModel.Protocols.OpenIdConnect

Includes types that provide support for OpenIdConnect protocol.

Microsoft.IdentityModel.Validators

Includes types that provide token validators.

Microsoft.Identity.Web

This package enables ASP.NET Core web apps and web APIs to use the Microsoft identity platform (formerly Azure AD v2.0). This package is specifically used for web applications, which sign-in users, and protected web APIs, which optionally call downstream web APIs.

Microsoft.Azure.ServiceBus

Please note, a newer package Azure.Messaging.ServiceBus is available as of November 2020. While this package will continue to receive critical bug fixes, we strongly encourage you to upgrade. Read the migration guide at https://aka.ms/azsdk/net/migrate/sb for more details.

Microsoft.Identity.Web.TokenAcquisition

Implementation for higher level API for confidential client applications (ASP.NET Core and SDK/.NET).

GitHub repositories (398)

Showing the top 20 popular GitHub repositories that depend on System.IdentityModel.Tokens.Jwt:

Repository Stars
microsoft/semantic-kernel

Integrate cutting-edge LLM technology quickly and easily into your apps

dotnet/roslyn

The Roslyn .NET compiler provides C# and Visual Basic languages with rich code analysis APIs.

duplicati/duplicati

Store securely encrypted backups in the cloud!

abpframework/abp

Open-source web application framework for ASP.NET Core! Offers an opinionated architecture to build enterprise software solutions with best practices on top of the .NET. Provides the fundamental infrastructure, cross-cutting-concern implementations, startup templates, application modules, UI themes, tooling and documentation.

microsoft/garnet

Garnet is a remote cache-store from Microsoft Research that offers strong performance (throughput and latency), scalability, storage, recovery, cluster sharding, key migration, and replication features. Garnet can work with existing Redis clients.

chocolatey/choco

Chocolatey - the package manager for Windows

dotnet-architecture/eShopOnWeb

Sample ASP.NET Core 8.0 reference application, now community supported: https://github.com/NimblePros/eShopOnWeb

dodyg/practical-aspnetcore

Practical samples of ASP.NET Core 10, 9, 8.0, 7.0, 6.0, 5.0, 3.1, 2.2, and 2.1,projects you can use. Readme contains explanations on all projects.

Kareadita/Kavita

Kavita is a fast, feature rich, cross platform reading server. Built with the goal of being a full solution for all your reading needs. Setup your own server and share your reading collection with your friends and family.

unoplatform/uno

Open-source platform for building cross-platform native Mobile, Web, Desktop and Embedded apps quickly. Create rich, C#/XAML, single-codebase apps from any IDE. Hot Reload included! 90m+ NuGet Downloads!!

ThreeMammals/Ocelot

.NET API Gateway

stride3d/stride

Stride (formerly Xenko), a free and open-source cross-platform C# game engine.

Azure/azure-sdk-for-net

This repository is for active development of the Azure SDK for .NET. For consumers of the SDK we recommend visiting our public developer docs at https://learn.microsoft.com/dotnet/azure/ or our versioned developer docs at https://azure.github.io/azure-sdk-for-net.

kurrent-io/KurrentDB

KurrentDB is a database that's engineered for modern software applications and event-driven architectures. Its event-native design simplifies data modeling and preserves data integrity while the integrated streaming engine solves distributed messaging challenges and ensures data consistency.

ChilliCream/graphql-platform

Welcome to the home of the Hot Chocolate GraphQL server for .NET, the Strawberry Shake GraphQL client for .NET and Nitro the awesome Monaco based GraphQL IDE.

STranslate/STranslate

A ready-to-go translation ocr tool developed with WPF/WPF 开发的一款即用即走的翻译、OCR工具

ServiceStack/ServiceStack

Thoughtfully architected, obscenely fast, thoroughly enjoyable web services for all

anjoy8/Blog.Core

💖 ASP.NET Core 8.0 全家桶教程,前后端分离后端接口,vue教程姊妹篇,官方文档:

Azure/azure-powershell

Microsoft Azure PowerShell

cobbr/Covenant

Covenant is a collaborative .NET C2 framework for red teamers.

Version Downloads Last Updated
8.16.0 729,524 2/13/2026
8.15.0 13,546,830 11/18/2025
8.14.0 23,039,177 8/15/2025
8.13.1 1,745,590 8/8/2025
8.13.0 3,826,980 7/21/2025
8.12.1 10,740,630 6/17/2025
8.12.0 5,067,236 6/3/2025
8.11.0 3,486,696 5/23/2025
8.10.0 2,779,295 5/15/2025
8.9.0 8,702,461 4/24/2025
8.8.0 10,817,687 4/8/2025
8.7.0 6,728,027 3/21/2025
8.6.1 19,013,155 3/7/2025
8.6.0 5,536,089 2/22/2025
8.5.0 4,475,859 2/15/2025
8.4.0 3,304,223 2/7/2025
8.3.1 18,438,158 1/17/2025
8.3.0 22,313,478 12/4/2024
8.2.1 13,700,367 11/15/2024
8.2.0 14,788,341 11/2/2024